[MESOS-6999] Add agent support for generating and passing executor secrets

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: agent, security
• Labels: agent executor flags mesosphere security
• Epic Link: Executor Authentication
• Sprint: Mesosphere Sprint 52, Mesosphere Sprint 53
• Story Points: 5
• Assignee: Greg Mann
• Reporter: Greg Mann
• Shepherd: Anand Mazumdar
• Created: 26/Jan/17 07:44
• Updated: 29/Apr/19 09:26
• Resolved: 25/Mar/17 19:35

Description

The agent must generate and pass executor secrets to all executors using the V1 API. For MVP, the agent will have this behavior by default when compiled with SSL support. To accomplish this, the agent must:

• load the default SecretGenerator module
• call the secret generator when launching an executor
• pass the generated secret into the executor's environment